Dashboard / CVE-2026-112109

CVE-2026-112109

HIGH
MEDIUM Priority: 0.01 BB Relevance: 30/100
Published: 2026-11-05 Modified: 2026-11-06 First seen: 2026-11-05 Status: active

Attack Surface

No Interaction Conf. Impact Integ. Impact

CVSS Vector Breakdown

AV: Local
AC: High
PR: Low
UI: None
S: X
AT: Present
VC: High
VI: High
VA: High

Description

A local privilege escalation vulnerability in Thales SafeNet Authentication Client (SAC) SACSrv can allow an authenticated, non-administrator local user to trigger a heap-based buffer overflow through the service interface. Successful exploitation may allow arbitrary code execution with Local System privileges.This issue affects SAC releases up to and including 10.9 R3 GA (build 10.9.7449).

Weakness Classification (2)

Affected Software (2)

VendorProductVersion
Thalesgroup Safenet Authentication Client Service 0
Thalesgroup Safenet Authentication Client Service 0

References & Advisories (1)

Bug Bounty Relevance

30 / 100
✓ No user interaction

CVSS Score

7.3 / 10.0 v4.0
CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

EPSS — Exploitation Probability

0.14%
Raw Score 0.001350
Percentile 3.1%
Date 2026-11-13

EPSS Trend

2026-11-13
0.00135
2026-11-12
0.00135
2026-11-10
0.00135
2026-11-09
0.00135
2026-11-08
0.00135
2026-11-07
0.00135
2026-11-06
0.00135

Intelligence Sources

mitre ref →
nvd ref →

External Links